From a87076359de293720f483cad40a05cf33af240b6 Mon Sep 17 00:00:00 2001 From: Brady Miller Date: Wed, 24 Jan 2024 12:14:27 -0800 Subject: [PATCH] chore: update security reporting documentation and some funding documentation (#7185) --- .github/ISSUE_TEMPLATE/bug_report.md | 4 ++-- .github/ISSUE_TEMPLATE/feature_request.md | 6 +++--- .github/ISSUE_TEMPLATE/security_report.md | 6 +++--- .github/SECURITY.md | 8 +------- 4 files changed, 9 insertions(+), 15 deletions(-) diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md index 86759596005..5068553ba7c 100644 --- a/.github/ISSUE_TEMPLATE/bug_report.md +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -28,7 +28,7 @@ Steps to reproduce the behavior: - OpenEMR version: - Operating system: - + diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md index 8a1cba14d4b..c2e30a1db88 100644 --- a/.github/ISSUE_TEMPLATE/feature_request.md +++ b/.github/ISSUE_TEMPLATE/feature_request.md @@ -6,7 +6,7 @@ about: Suggest a feature for OpenEMR ### Describe the problem -Write a concise description of the problem +Write a concise description of the problem ### Describe the solution you'd like @@ -14,5 +14,5 @@ Write concise description of what feature you want - + diff --git a/.github/ISSUE_TEMPLATE/security_report.md b/.github/ISSUE_TEMPLATE/security_report.md index 146652b16fd..e568c25d983 100644 --- a/.github/ISSUE_TEMPLATE/security_report.md +++ b/.github/ISSUE_TEMPLATE/security_report.md @@ -6,9 +6,9 @@ about: Privately report a security vulnerability -Send an email to brady.g.miller@gmail.com . If possible, please encrypt your email via PGP with this [public key](https://keybase.io/bradymiller/pgp_keys.asc?fingerprint=8a93ddec0e320d5eb8a7994827def05b1a8a6d4f). +Send an email to security@open-emr.org . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc). Thank you for the help! - \ No newline at end of file + diff --git a/.github/SECURITY.md b/.github/SECURITY.md index 1c65d81834d..72a2012ff68 100644 --- a/.github/SECURITY.md +++ b/.github/SECURITY.md @@ -1,8 +1,2 @@ # Reporting Security Vulnerabilities -If you discover a security vulnerability in OpenEMR, there are 2 options for reporting the vulnerability to the OpenEMR security group. - -## Option 1. Report via huntr -- Report via [our huntr page](https://huntr.dev/repos/openemr/openemr/). Bounty eligibility, CVE assignment, response times and past reports are all there. - -## Option 2. Email security@open-emr.org -- Send an email to security@open-emr.org . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc). +If you discover a security vulnerability in OpenEMR, then report the vulnerability to the OpenEMR security group email at security@open-emr.org . If possible, please encrypt your email via PGP with this [public key](https://www.open-emr.org/files/openemr-security-pgp-key.asc).